$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa File: 815dbd30-4974-4c77-9a27-6ac45a9fb646.roa (raw, json) Hash identifier: Y5GLetiYvM0p3JQbQHWOnOtWv6Ssb98EFO+gWa8p9pk= Subject key identifier: 2F:7C:33:92:F4:92:D7:83:3F:16:D2:2E:04:2D:AF:25:A7:35:49:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6016899CA590C0C87E82EE415CAF67FBB7EA878F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa Signing time: Tue 29 Apr 2025 00:00:29 +0000 ROA not before: Tue 29 Apr 2025 00:00:29 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 22394 IP address blocks: 162.208.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:16:89:9c:a5:90:c0:c8:7e:82:ee:41:5c:af:67:fb:b7:ea:87:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:00:29 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=8f1f82e9699247327c67c3a90f7104b16447d531ab3c4dd8415c376f07844084, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f1:08:9a:08:89:6b:7e:2c:bd:95:32:bc:9e: e0:63:4c:70:e7:28:21:74:7e:fd:28:69:2b:25:be: da:9a:c1:1d:da:12:b5:4e:6c:b2:8d:d4:b4:6d:7e: e6:7d:24:d9:2b:19:f2:08:ed:fc:ca:14:36:a0:6b: 6a:05:8f:1d:54:12:39:2a:b1:cb:2a:e3:8b:f2:87: f9:f7:b6:bd:bf:6b:97:4b:9d:30:d8:f5:58:02:12: a4:5a:89:57:26:e2:87:3d:3f:8c:1e:32:e5:c9:32: 5a:38:ec:51:7e:bd:fc:6f:ec:a3:9b:f4:91:29:70: 6c:f9:ad:58:8d:51:bb:53:5d:e4:c2:66:a4:a4:70: ed:b3:2f:64:d8:ec:b7:c1:3c:15:3b:44:bd:80:89: d2:42:a9:59:84:d4:d5:3e:81:b7:08:ed:cd:5b:65: 4e:2d:32:40:3d:9d:e4:08:a4:2e:10:22:74:f2:77: 3c:f4:6e:1f:ab:6d:60:00:fb:ea:39:1e:6f:38:c6: fd:9c:a5:d1:fd:8f:4c:3b:95:84:c5:81:08:3d:f5: 01:37:d3:8b:33:b8:29:d9:5f:d3:df:93:df:a4:5d: 25:d0:35:bd:a8:5a:77:68:f7:38:6f:da:72:13:f5: 6e:c3:80:15:0e:5b:15:84:2e:b8:9e:4c:e2:f3:f3: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7C:33:92:F4:92:D7:83:3F:16:D2:2E:04:2D:AF:25:A7:35:49:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.208.122.0/24 Signature Algorithm: sha256WithRSAEncryption b7:45:18:6a:a3:fc:12:10:89:27:02:57:68:c2:cf:f6:34:0e: 11:dd:55:1e:a8:39:74:6a:bf:68:5c:8c:df:07:cb:8d:7e:3a: 9e:f4:39:76:89:97:fb:42:16:f1:06:d3:80:7b:3d:c1:25:71: b5:43:a9:3d:e9:61:d8:04:8b:fa:b2:b3:06:04:3f:8a:c5:69: d8:d6:06:c6:10:9c:2f:ee:60:1d:67:ff:96:a2:f3:09:26:40: 31:5a:49:4e:57:ef:f2:26:c6:03:9c:71:df:6a:e2:83:28:96: 2e:d3:21:dc:9f:90:d9:3e:00:35:dc:45:e7:64:b1:d7:c1:e4: c4:9b:a9:aa:d9:7b:2f:a6:0b:ec:33:4a:a0:6b:f5:22:0b:31: 49:ab:e6:77:ef:f9:03:85:f3:64:10:3f:ce:d1:77:ea:e6:07: 70:44:e7:b6:4a:10:3e:03:e0:87:48:15:b8:4a:3b:88:c6:66: ae:8f:bd:54:20:86:4c:04:23:59:c0:0e:66:06:fd:f8:22:f1: c8:7c:06:3f:cc:aa:88:4c:c7:62:9e:02:cb:f2:12:8e:04:98: 1e:b6:90:18:28:24:4d:6d:d1:ae:84:ba:9d:b5:78:06:de:12: a2:9e:83:82:52:ab:e7:b3:cb:dd:2d:53:d3:4f:19:64:62:5c: a0:1f:59:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYBaJnKWQwMh+gu5BXK9n+7fqh48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAwMDI5WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjFmODJlOTY5OTI0NzMyN2M2N2MzYTkwZjcxMDRiMTY0 NDdkNTMxYWIzYzRkZDg0MTVjMzc2ZjA3ODQ0MDg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCE8QiaCIlrfiy9lTK8nuBjTHDnKCF0fv0oaSslvtqawR3a ErVObLKN1LRtfuZ9JNkrGfII7fzKFDaga2oFjx1UEjkqscsq44vyh/n3tr2/a5dL nTDY9VgCEqRaiVcm4oc9P4weMuXJMlo47FF+vfxv7KOb9JEpcGz5rViNUbtTXeTC ZqSkcO2zL2TY7LfBPBU7RL2AidJCqVmE1NU+gbcI7c1bZU4tMkA9neQIpC4QInTy dzz0bh+rbWAA++o5Hm84xv2cpdH9j0w7lYTFgQg99QE304szuCnZX9Pfk9+kXSXQ Nb2oWndo9zhv2nIT9W7DgBUOWxWELrieTOLz8w9bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL3wzkvSS14M/FtIuBC2vJac1Sa8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxNWRiZDMwLTQ5NzQtNGM3Ny05YTI3LTZhYzQ1YTlmYjY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi0HowDQYJKoZIhvcNAQELBQADggEBALdFGGqj/BIQiScCV2jCz/Y0DhHd VR6oOXRqv2hcjN8Hy41+Op70OXaJl/tCFvEG04B7PcElcbVDqT3pYdgEi/qyswYE P4rFadjWBsYQnC/uYB1n/5ai8wkmQDFaSU5X7/ImxgOccd9q4oMoli7TIdyfkNk+ ADXcRedksdfB5MSbqarZey+mC+wzSqBr9SILMUmr5nfv+QOF82QQP87Rd+rmB3BE 57ZKED4D4IdIFbhKO4jGZq6PvVQghkwEI1nADmYG/fgi8ch8Bj/MqohMx2KeAsvy Eo4EmB62kBgoJE1t0a6Eup21eAbeEqKeg4JSq+ezy90tU9NPGWRiXKAfWSs= -----END CERTIFICATE-----Generated at Sat May 10 13:50:11 2025 by rpki-client